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IN THE SPECIFICATION : 

Please replace the paragraph bridging specification pages 21 and 22 with the 
following replacement paragraph: 

Fig. 6 is a schematic block diagram illustrating modified data buffer 600 
comprising an exemplary raw data buffer §25 -530 configured to store "raw" (write) data 
associated with an incoming write operation. A first portion of the raw data buffer 525 
530 is overwritten with a novel buffer check control structure 700, described further 
below. In accordance with the illustrative embodiment of the present invention, the 
buffer check control structure 700 overwrites the first portion of the raw data buffer 525 
530 to enable detection of leaked buffer write operations across file system consistency 
points (CP). Overwriting the raw buffer is a destructive operation that destroys the 
overwritten data, e.g., the first portion of the data, rendering the data (and buffer) 
inaccessible. Adherence to such destructive overwriting for all write operations directed 
to the storage appliance, will result in corrupted user data and/or system files. To prevent 
such corruption, the present invention is directed to controlled and selective raw data 
areas, such as specified volumes and/or qtrees. These selected areas may be utilized for 
testing purposes. Thus, write operations directed to a test volume may be destructively 
labeled, whereas write operations to an active and in-use volume are not destructively 
labeled using the teachings of the present invention. 
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Please replace the first full paragraph of specification page 22 with the following 
replacement paragraph: 

It should be noted that in alternate embodiments, the buffer check control 
structure may be prepended to the beginning or annexed to the end of the raw data 
buffer-525 530 . In such embodiments, the buffer check control structure does not 
overwrite any of the data contained within the raw data buffer-S25_530. During write 
allocation using a non-destructive label, the appropriate write allocation process (e.g., 
WALLOC 285) within the file system removes ("strips off) the buffer check control 
structure before the raw data is written to disk. In such embodiments, the labeling of 
write operations with the buffer check control structure is not destructive and therefore 
may be applied to all volumes and/or qtrees to provide improved reliability by ensuring 
the detection of buffer leakage from one CP to another CP. 
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